CVE-2015-7703

The "pidfile" or "driftfile" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configured to allow remote configuration, allows remote attackers with an IP address that is allowed to send configuration requests, and with knowledge of the remote configuration password to write to arbitrary files via the :config command.

• CWE-20

• http://rhn.redhat.com/errata/RHSA-2016-0780.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2583.htmlThird Party Advisory
• http://support.ntp.org/bin/view/Main/NtpBug2902Vendor Advisory
• http://www.debian.org/security/2015/dsa-3388Third Party Advisory
• http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.htmlThird Party Advisory
• http://www.securityfocus.com/bid/77278Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1033951Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1254547Issue Tracking, Third Party Advisory, VDB Entry
• https://security.gentoo.org/glsa/201607-15Third Party Advisory
• https://security.netapp.com/advisory/ntap-20171004-0001/Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2016-0780.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2583.htmlThird Party Advisory
• http://support.ntp.org/bin/view/Main/NtpBug2902Vendor Advisory
• http://www.debian.org/security/2015/dsa-3388Third Party Advisory
• http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.htmlThird Party Advisory
• http://www.securityfocus.com/bid/77278Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1033951Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1254547Issue Tracking, Third Party Advisory, VDB Entry
• https://security.gentoo.org/glsa/201607-15Third Party Advisory
• https://security.netapp.com/advisory/ntap-20171004-0001/Third Party Advisory

Published

Jul 24, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-7697Info-ZIP UnZip 6.0 allows remote attackers to cause a denial…
• CVE-2015-7698icewind1991 SMB before 1.0.3 allows remote authenticated use…
• CVE-2015-7699The files_external app in ownCloud Server before 7.0.9, 8.0.…
• CVE-2015-7700Double-free vulnerability in the sPLT chunk structure and pn…
• CVE-2015-7701Memory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.…7.5
• CVE-2015-7702The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4…6.5
• CVE-2015-7704The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4…7.5
• CVE-2015-7705The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.…9.8
• CVE-2015-7706Multiple cross-site scripting (XSS) vulnerabilities in Secur…
• CVE-2015-7707Ignite Realtime Openfire 3.10.2 allows remote authenticated …
• CVE-2015-7708Cross-site scripting (XSS) vulnerability in 4images 1.7.11 a…
• CVE-2015-7709The arkeiad daemon in the Arkeia Backup Agent in Western Dig…